Privacy Policy
This policy explains how Permapotes processes your personal data and uses cookies or similar technologies.
1. Data controller
The data controller is Arnaud Deschamps, publisher of Permapotes. You may contact him at privacy@permapotes.com or through the website contact form.
2. Data processed and purposes
Depending on how you use the website, Permapotes may process:
- your username, email address and data required to create, access and secure your account;
- information you provide voluntarily, including location, photographs, posts, garden, crops and website activity;
- technical connection and security data such as IP address, browser, device, access dates and error logs;
- subscription and payment information, without Permapotes storing your complete bank card details;
- if you receive the newsletter, its delivery status, opens and clicks.
Data identified as mandatory in a form is necessary to provide the requested service, including creating and securing an account, handling a request or managing a subscription. Without it, the relevant request cannot be processed. Other data is optional; not providing it does not prevent access to features that do not depend on it.
This data is used to provide and secure the service, manage accounts, content and subscriptions, answer requests, send the newsletter when you have consented, measure audiences and, with your consent, measure the effectiveness of advertising campaigns run on Meta services, including visits and conversions attributable to those campaigns.
3. Legal bases and retention periods
- Performance of a contract: account, service and subscription management.
- Consent: newsletter, Google Analytics 4 and Meta Pixel. Consent may be withdrawn at any time.
- Legitimate interests: security, abuse prevention, technical diagnosis and defence of Permapotes' rights.
- Legal obligation: retention of required accounting records and evidence.
Account data is retained while the account is used and is then deleted or anonymised, subject to legal obligations, necessary evidence and backups. Accounting documents are retained for ten years. Newsletter data is retained until you unsubscribe; minimal evidence of the opt-out may then be kept. GA4 event data is retained for fourteen months. App logs are retained for one month and access logs archived by the hosting provider for no more than two months. Support exchanges are retained for as long as necessary to handle the request and defend possible claims.
4. Newsletter
The newsletter is sent using Mailjet (Sinch Email). Mailjet receives your email address and the information required for delivery. When tracking is enabled, Mailjet also records delivery, opens and clicks to measure newsletter usage. You can unsubscribe using the link in each message.
5. Recipients
To the extent required for their tasks, data may be accessible to the hosting provider o2switch, Mailjet (Sinch Email), Stripe for payments, Google for reCAPTCHA and Analytics, Meta Platforms Ireland for Meta Pixel, OpenWeather for weather data, and legally authorised authorities. OpenWeather receives rounded geographical coordinates only, without any name, email address or account identifier.
Permapotes does not sell your data or disclose it to partners so that they can send you their own marketing. Content you choose to publish may nevertheless be accessible to other users or the public according to its visibility.
6. Google reCAPTCHA
The registration page uses Google reCAPTCHA through the recaptcha.net domain to detect automated registrations. Google may receive the IP address, browser and device information, referring page, interactions required for risk analysis and technical identifiers. The result is used solely to prevent abuse and has no other legal effect. The necessary _GRECAPTCHA cookie may be retained for up to six months. reCAPTCHA is required to submit the registration form. The username and email address entered in the form are not intentionally sent to Google. Further information: Google Privacy Policy.
7. Cookies and audience measurement
Necessary cookies are used without consent. Google Analytics 4 and Meta Pixel are activated only after you agree. You may refuse them or withdraw your consent without losing access to the website.
| Category | Cookies | Purpose | Recipient | Maximum duration |
|---|---|---|---|---|
| Necessary | permapotes_session, XSRF-TOKEN |
Maintain and secure the session and forms | Permapotes | 12 hours |
| Necessary | remember_web_* |
Remember your login when requested | Permapotes | 1 year |
| Privacy choices | permapotes_consent |
Remember your choices | Permapotes | 6 months |
| reCAPTCHA security | _GRECAPTCHA |
Prevent automated registrations | 6 months | |
| Google Analytics 4 | _ga, _ga_5M1EMQZ9D8 |
Measure audiences | 2 years | |
| Meta Pixel | _fbp, _fbc |
Measure visits and conversions attributable to Meta advertising campaigns | Meta Platforms Ireland | 90 days |
You may change or withdraw your consent at any time by selecting Manage my cookie preferences. You may also delete cookies already stored through your browser settings.
7a. External technical services
When you use the relevant features, your browser may directly contact technical services: OpenStreetMap Foundation, Esri and IGN/GéoPF for map backgrounds; Google/YouTube in privacy-enhanced mode when you request a help video; jsDelivr for the shared calendar component; and OpenWeather for certain weather icons. These providers may receive the IP address, browser, requested resource, date and, depending on browser settings, the referring page. Permapotes uses these connections only to provide the requested map, video, calendar or weather information, not to deliver its own personalised advertising.
When you consent to Google Analytics 4, Permapotes sends usage events including language, page path and non-identifying information about the interaction or plan viewed. Permapotes does not intentionally send Analytics your account ID, email address or Stripe payment-session identifier.
Provider information: OpenStreetMap Foundation, Esri, IGN, Google/YouTube, jsDelivr and OpenWeather.
8. Transfers outside the European Economic Area
Some providers may process data outside the European Economic Area. Depending on the provider and processing, transfers rely in particular on an adequacy decision, the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. Provider information: Google, Meta, Stripe and Mailjet.
9. Your rights
Under the conditions set by the GDPR, you may request access, rectification, erasure, restriction or portability of your data, object to certain processing and withdraw your consent. Send your request to privacy@permapotes.com. Proof of identity may be requested where there is reasonable doubt. A response will normally be provided within one month.
You may also lodge a complaint with the Belgian Data Protection Authority.
10. Security and changes
Permapotes implements technical and organisational measures appropriate to the risks in order to protect data. This policy may be updated, in particular when the service, providers or applicable law change.